Wi-Fi kiosks used as surveillance rigs, critics claim

Jul 29, 2016 15:05 GMT  ·  By

Privacy advocacy groups are sounding the alarm on LinkNYC, a network of free Wi-Fi kiosks that have been installed across New York City in the past year by CityBridge, which is a consortium of companies such as Qualcomm, CIVIQ Smartscapes, and Intersection, the latter a company in which Sidewalk Labs invested, who is part of Alphabet.

The kiosks, called Links, enable users to connect to a private Wi-Fi network, allow free domestic calling, provide free device charging via USB ports, an integrated tablet for surfing the Web, and an emergency button for calling 911.

Based on reports from Cryptome and MassPrivateI, over 10,000 of such kiosks will be installed in New York. The project has told Softpedia that they only have 300 kiosks installed in the city, with 7,500 to be installed in the coming years.

Wi-Fi kiosks collect a lot of data on those who use them

The two groups also claim that these kiosks secretly spy on users. Their arguments are the lack of transparency from NYC's municipality, which has failed to provide in-depth details about how these kiosks work.

Even if it is normal and makes sense for these kiosks to feature surveillance cameras, MassPrivateI points out that the rigs hide these cameras in an attempt to fool users into thinking that they are not being watched.

Furthermore, the group also stresses that these kiosks also collect information such as MAC address, IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, device type, and device identifiers.

Additionally, the kiosks also collect the user's search history, pages they viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.

"CityBridge claims they won't keep a person's personally identifiable information longer than 12 months after their last login. Which means, every time the same person uses CityBridge they reset their privacy countdown," MassPrivateI writes in its report.

Kiosks could be used to track New Yorkers around the city

Furthermore, MassPrivateI claims that these kiosks form a mesh of spying devices across New York City, allowing its owner to track users bearing Wi-Fi enabled devices as they move around the city.

The group claims that the kiosks could track a person based on the MAC address of their device, as it passes through the coverage of their kiosks, and through the two cameras embedded in the rigs.

Until now, CityBridge has denied it shared any data with local law enforcement, but the company has said that it will share user details with advertising companies.

"LinkNYC does not collect or store any data on users' personal web browsing on their own devices," a spokesperson for the project has told Softpedia. "CityBridge will never sell any user’s personal information or share with third parties for their own use. This includes the City, law enforcement, investors, vendors, partners, and advertisers. Alphabet, Sidewalk Labs, and Google are all third parties to CityBridge."

Over 5 million people have used the LinkNYC kiosks until now, and the network is set to expand across the US to other cities.

UPDATE [July 29, 2016]: The story has been updated with statements from the project. The title has also been updated to reflect Google's minimal role in the project.